Home Embedded Vulns General Vulns

ESV-Tracker

An AI-powered database that classifies embedded vulnerabilities separately from general-purpose ones.

No Dedicated Database Existed. Until Now.

Embedded system vulnerabilities are critical, yet buried alongside millions of general CVEs. ESV-Tracker changes that.

Your Embedded Threat Center.

Search the database, track embedded CVEs, and explore real-time statistics — all in one place.

4355
New Embedded Vulns (7 Days)
10461
Active Critical ESVs
jetbrains
Top Target (30 Days)
6.93
Average ESV CVSS Score

Vulnerability Trends (Last 6 Months)

ESV Severity Distribution (90 Days)

Top Affected ESV Vendors (90 Days)

  • google 129 Vulns
  • dell 48 Vulns
  • microsoft 27 Vulns
  • apple 10 Vulns
  • jetbrains 7 Vulns

Recent Critical ESVs

CVE-2026-111329 CRITICAL 9.8
CVE-2026-111322 CRITICAL 9.8
CVE-2026-111283 CRITICAL 9.0
CVE-2026-111281 CRITICAL 9.8
CVE-2026-105039 CRITICAL 9.6

Recently Added Vulnerabilities

CVE ID Description Severity Published Type
CVE-2026-86847 A flaw was found in DPDK lib/vhost vhost-crypto. Write-back chain cleanup can follow an uninitialized next pointer when… Medium (6.5) 2026-10-14 Environment Specific
CVE-2026-86846 A flaw was found in DPDK lib/vhost vhost-crypto. A guest can supply an avail-ring descriptor index that is used without… Medium (6.5) 2026-10-14 Environment Specific
CVE-2026-86845 A flaw was found in DPDK lib/vhost vhost-crypto. Session cleanup can leave a stale cached session pointer, and the data… Medium (6.5) 2026-10-14 Environment Specific
CVE-2026-86567 A flaw was found in DPDK lib/vhost. The VDUSE handler fails to invalidate vring pointers when the IOTLB is invalidated,… High (8.8) 2026-10-14 Environment Specific
CVE-2026-86566 A flaw was found in DPDK lib/vhost. A guest with runt RX descriptors can underflow the copy length in vhost enqueue, ca… Medium (6.5) 2026-10-14 Environment Specific